General

  • Target

    eb92d5f845d9df8c1752dd8c5bb637e812f1e99e15fd556dc964ab5d6a423594

  • Size

    297KB

  • Sample

    241111-mxvwqayeld

  • MD5

    4e7703f303845239bfa447587c0a3ee9

  • SHA1

    32f20801318fa2b75a9b25fd8bd4c461b733f992

  • SHA256

    eb92d5f845d9df8c1752dd8c5bb637e812f1e99e15fd556dc964ab5d6a423594

  • SHA512

    15d8c3b62e411b6c9affd326d293caeeb0ae9d0c60dd03ae634ac04ffd835566202aafb463ddb4b6719f5fec5c0ea32c9a0638133ad79ffb016a584e4b431421

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      eb92d5f845d9df8c1752dd8c5bb637e812f1e99e15fd556dc964ab5d6a423594

    • Size

      297KB

    • MD5

      4e7703f303845239bfa447587c0a3ee9

    • SHA1

      32f20801318fa2b75a9b25fd8bd4c461b733f992

    • SHA256

      eb92d5f845d9df8c1752dd8c5bb637e812f1e99e15fd556dc964ab5d6a423594

    • SHA512

      15d8c3b62e411b6c9affd326d293caeeb0ae9d0c60dd03ae634ac04ffd835566202aafb463ddb4b6719f5fec5c0ea32c9a0638133ad79ffb016a584e4b431421

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks